fix(manifests): add hostPID for hairpin

This is needed because #1582 which was recently merged relies upon
finding the correct veth interface via /proc/<pid> which isn't available
unless kube-router is in the same process namespace.

hostPID and hostIPC was always required for DSR functionality, but now
hostPID is needed for hairpin to be available.
This commit is contained in:
Aaron U'Ren 2023-12-08 16:35:49 -06:00 committed by Aaron U'Ren
parent aebaa48ea1
commit eb2628874c
11 changed files with 11 additions and 0 deletions

View File

@ -143,6 +143,7 @@ spec:
- name: kubeconfig
mountPath: /var/lib/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -139,6 +139,7 @@ spec:
- name: kubeconfig
mountPath: /var/lib/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -64,6 +64,7 @@ spec:
mountPath: /run/xtables.lock
readOnly: false
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -109,6 +109,7 @@ spec:
- mountPath: /etc/kube-router
name: kube-router-cfg
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -104,6 +104,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -100,6 +100,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -99,6 +99,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -99,6 +99,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -120,6 +120,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -113,6 +113,7 @@ spec:
- name: kube-router-cfg
mountPath: /etc/kube-router
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists

View File

@ -112,6 +112,7 @@ spec:
- mountPath: /etc/kube-router
name: kube-router-cfg
hostNetwork: true
hostPID: true
tolerations:
- effect: NoSchedule
operator: Exists